(Simple Java Mail) ... unable to find valid certification path to requested target

[Rick Liberato]

Hello!  (Beginner java)   using "Simple Java Mail" jar

I think something is looking for a security certificate (my computer's OS, Netbeans IDE, Gmail server ... I dont know  :  (

I am getting this third party error:

Exception in thread "AWT-EventQueue-0" org.simplejavamail.mailer.internal.mailsender.MailSenderException: Third party error
at org.simplejavamail.mailer.internal.mailsender.MailSender.sendMailClosure(MailSender.java:222)
at org.simplejavamail.mailer.internal.mailsender.MailSender.send(MailSender.java:172)
at org.simplejavamail.mailer.Mailer.sendMail(Mailer.java:332)
at org.simplejavamail.mailer.Mailer.sendMail(Mailer.java:323)
at myNewSMDR.MainDisplay.jButton4ActionPerformed(MainDisplay.java:529)
at myNewSMDR.MainDisplay.access$200(MainDisplay.java:30)
at myNewSMDR.MainDisplay$4.actionPerformed(MainDisplay.java:171)
at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)
at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2348)
at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)
at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)
at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(BasicButtonListener.java:252)
at java.awt.Component.processMouseEvent(Component.java:6533)
at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)
at java.awt.Component.processEvent(Component.java:6298)
at java.awt.Container.processEvent(Container.java:2236)
at java.awt.Component.dispatchEventImpl(Component.java:4889)
at java.awt.Container.dispatchEventImpl(Container.java:2294)
at java.awt.Component.dispatchEvent(Component.java:4711)
at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4888)
at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4525)
at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4466)
at java.awt.Container.dispatchEventImpl(Container.java:2280)
at java.awt.Window.dispatchEventImpl(Window.java:2746)
at java.awt.Component.dispatchEvent(Component.java:4711)
at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)
at java.awt.EventQueue.access$500(EventQueue.java:97)
at java.awt.EventQueue$3.run(EventQueue.java:709)
at java.awt.EventQueue$3.run(EventQueue.java:703)
at java.security.AccessController.doPrivileged(Native Method)
at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:80)
at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:90)
at java.awt.EventQueue$4.run(EventQueue.java:731)
at java.awt.EventQueue$4.run(EventQueue.java:729)
at java.security.AccessController.doPrivileged(Native Method)
at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:80)
at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)
at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)
at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)
at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)
at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)
at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)
at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)
Caused by: javax.mail.MessagingException: Could not convert socket to TLS;
 nested exception is:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at com.sun.mail.smtp.SMTPTransport.startTLS(SMTPTransport.java:2064)
at com.sun.mail.smtp.SMTPTransport.protocolConnect(SMTPTransport.java:724)
at javax.mail.Service.connect(Service.java:388)
at javax.mail.Service.connect(Service.java:246)
at javax.mail.Service.connect(Service.java:195)
at org.simplejavamail.mailer.internal.mailsender.MailSender.sendMailClosure(MailSender.java:204)

Email email = new Email();

email.setFromAddress("Michel Baker", "[e-mail]");
email.addRecipient("mom", "[e-mail]", RecipientType.TO);
email.setSubject("My Bakery is finally open!");
email.setText("Mom, Dad. We did the opening ceremony of our bakery!!!");

new Mailer("smtp.gmail.com", 587, "[e-mail]", "myPASSWORD",TransportStrategy.SMTP_TLS).sendMail(email);

[Ron McLeod]

I'm not sure if this is your problem or not, but you should probably be using port 465 for TLS rather than 587.

[Rajith Pemabandu]

suppose the SSL certificate isn't trusted by Java.

Just add below code to trust the certificate

http://stackoverflow.com/questions/33868167/javax-net-ssl-sslhandshakeexception-sun-security-validator-validatorexception

[Rick Liberato]

.... (Java beginner here)   I see the code your referring to .... what do I do with it? Whats that code do?  

PS: I tried all the other port numbers as well ..... but get same error.

[Rick Liberato]

I am running the "X509TrustManager()"  code  before my Email code .... etting same error.

[Rick Liberato]

...... this is what i'm running now ...... same error!

private void jButton4ActionPerformed(java.awt.event.ActionEvent evt) {                                         
       // SEND button (for email)
   
   TrustManager[] trustAllCerts = new TrustManager[]{
   new X509TrustManager() {
    @Override
    public java.security.cert.X509Certificate[] getAcceptedIssuers() {
        return null;
    }
    @Override
    public void checkClientTrusted(
        java.security.cert.X509Certificate[] certs, String authType) {
    }
    @Override
    public void checkServerTrusted(
        java.security.cert.X509Certificate[] certs, String authType) {
    }
}};

   try {
    SSLContext sc = SSLContext.getInstance("SSL");
    sc.init(null, trustAllCerts, new java.security.SecureRandom());
    HttpsURLConnection.setDefaultSSLSocketFactory(sc.getSocketFactory());
    } catch (KeyManagementException | NoSuchAlgorithmException e) {
    }
       
    Email email = new Email();

    email.setFromAddress("Michel Baker", "[e-mail]");
    email.addRecipient("mom", "[e-mail]", RecipientType.TO);
    email.setSubject("My Bakery is finally open!");
    email.setText("Mom, Dad. We did the opening ceremony of our bakery!!!");

    new Mailer("smtp.gmail.com", 465, "[e-mail]", "myPASSWORD" ,TransportStrategy.SMTP_TLS).sendMail(email);
   
        
        
    }                                        

[Ron McLeod]

You can send mail through Gmail (and others) by either connecting using SMTPS on port 465, or by connecting using SMTP on port 576 and then upgrading with STARTTLS - both will work.

All you need to send email from your Java application is JavaMail.  If you search around, you can find lots of half-working examples, so I've included some basic working code to help with understanding how to use the API.

SMTPS

private void sendUsingSmtps(Address sender, Address[] recipients,
		String subject, String body) throws MessagingException {
	Properties props = new Properties();
	Session session = Session.getDefaultInstance(props);
	session.setDebug(true);

	Message message = new MimeMessage(session);
	message.setFrom(sender);
	message.setSubject(subject);
	message.setText(body);

	Transport transport = session.getTransport("smtps");
	transport.connect(MAIL_HOST, USERNAME, PASSWORD);
	transport.sendMessage(message, recipients);
}

SMTP + STARTTLS

private void sendUsingStartTls(Address sender, Address[] recipients,
		String subject, String body) throws MessagingException {
	Properties props = new Properties();
	props.setProperty("mail.smtp.host", MAIL_HOST);
	props.setProperty("mail.smtp.port", "587");
	props.put("mail.smtp.auth", "true");
	props.setProperty("mail.smtp.starttls.enable", "true");

	Session session = Session.getInstance(props,
			new javax.mail.Authenticator() {
				protected PasswordAuthentication getPasswordAuthentication() {
					return new PasswordAuthentication(USERNAME, PASSWORD);
				}
			});
	session.setDebug(true);

	Message message = new MimeMessage(session);
	message.setFrom(sender);
	message.setRecipients(Message.RecipientType.TO, recipients);
	message.setSubject(subject);
	message.setText(body);

	Transport.send(message);
}

Test Driver

import java.io.UnsupportedEncodingException;
import java.util.Properties;

import javax.mail.Address;
import javax.mail.Message;
import javax.mail.MessagingException;
import javax.mail.PasswordAuthentication;
import javax.mail.Session;
import javax.mail.Transport;
import javax.mail.internet.InternetAddress;
import javax.mail.internet.MimeMessage;

public class SimpleEmailer {
	private static final String USERNAME = "[e-mail]";
	private static final String PASSWORD = "my-password";
	private static final String MAIL_HOST = "smtp.gmail.com";

	public static void main(String[] args) throws UnsupportedEncodingException,
			MessagingException {
		Address sender = new InternetAddress("[e-mail]", "My-Name");
		Address[] recipients = { new InternetAddress("[e-mail]") };
		String subject = "Test Message!";
		String body = "This is my test message";

		new SimpleEmailer().sendUsingSmtps(sender, recipients, subject, body);
//		new SimpleEmailer().sendUsingStartTls(sender, recipients, subject, body);
	}
	// send methods here
}

[Rick Liberato]

I been try different mail code all night .... and get that same error.  I'll try what you sent now.  Thank-you for helping! :  )

[Rick Liberato]

javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

SMTP + STARTTLS  ver.

[Rick Liberato]

..... same for other ver.

DEBUG: setDebug: JavaMail version 1.5.6
DEBUG: getProvider() returning javax.mail.Provider[TRANSPORT,smtp,com.sun.mail.smtp.SMTPTransport,Oracle]
DEBUG SMTP: need username and password for authentication
DEBUG SMTP: protocolConnect returning false, host=smtp.gmail.com, user=Rick, password=<null>
DEBUG SMTP: useEhlo true, useAuth true
DEBUG SMTP: trying to connect to host "smtp.gmail.com", port 587, isSSL false
220 smtp.gmail.com ESMTP 24sm15936358qtx.8 - gsmtp
DEBUG SMTP: connected to host "smtp.gmail.com", port: 587

EHLO 192.168.1.100
250-smtp.gmail.com at your service, [50.78.128.54]
250-SIZE 35882577
250-8BITMIME
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-PIPELINING
250 SMTPUTF8
DEBUG SMTP: Found extension "SIZE", arg "35882577"
DEBUG SMTP: Found extension "8BITMIME", arg ""
DEBUG SMTP: Found extension "STARTTLS", arg ""
DEBUG SMTP: Found extension "ENHANCEDSTATUSCODES", arg ""
DEBUG SMTP: Found extension "PIPELINING", arg ""
DEBUG SMTP: Found extension "SMTPUTF8", arg ""
STARTTLS
220 2.0.0 Ready to start TLS
Exception in thread "main" javax.mail.MessagingException: Could not convert socket to TLS;
 nested exception is:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[Rick Liberato]

DEBUG: setDebug: JavaMail version 1.5.6
DEBUG: getProvider() returning javax.mail.Provider[TRANSPORT,smtp,com.sun.mail.smtp.SMTPTransport,Oracle]
DEBUG SMTP: need username and password for authentication
DEBUG SMTP: protocolConnect returning false, host=smtp.gmail.com, user=Rick, password=<null>
DEBUG SMTP: useEhlo true, useAuth true
DEBUG SMTP: trying to connect to host "smtp.gmail.com", port 587, isSSL false
220 smtp.gmail.com ESMTP c142sm754231qkb.10 - gsmtp
DEBUG SMTP: connected to host "smtp.gmail.com", port: 587

EHLO 192.168.1.100
250-smtp.gmail.com at your service, [50.78.128.54]
250-SIZE 35882577
250-8BITMIME
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-PIPELINING
250 SMTPUTF8
DEBUG SMTP: Found extension "SIZE", arg "35882577"
DEBUG SMTP: Found extension "8BITMIME", arg ""
DEBUG SMTP: Found extension "STARTTLS", arg ""
DEBUG SMTP: Found extension "ENHANCEDSTATUSCODES", arg ""
DEBUG SMTP: Found extension "PIPELINING", arg ""
DEBUG SMTP: Found extension "SMTPUTF8", arg ""
STARTTLS
220 2.0.0 Ready to start TLS
Exception in thread "main" javax.mail.MessagingException: Could not convert socket to TLS;
 nested exception is:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

[Tim Moores]

The solution to this issue can be found unter "Other Topics" in the Security FAQ.

[Ron McLeod]

Rick Liberato wrote:javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

SMTP + STARTTLS  ver.

Seems like your certs are not up to date.


What OS and version are you using, and which version of the JRE?

I am running Java 1.8.0_121-b13 on Centos 6 and 1.8.0_45-b15 on Windows 10 - code works fine on both.

[Ron McLeod]

Do you have firewall/anti-virus software (comodo, Avast, etc.) on your workstation which might be messing with secure connections?

[Rick Liberato]

XP Pro 2002 Ser Pac 3   JDK 1.8.0_121

[Rick Liberato]

what are "certs" and how do ya update'em :  )

[Tim Moores]

That's what the link I posted explains.

[Rick Liberato]

Shut down AVG email scan ..... NOW ALL IS WORKING!!!

......  YOUR THE BOMMER!!!  Thank-you!!!  :  )

[Rick Liberato]

.... I assume there is a way I can tell AVG to NOT look at my app's E-mail sending? (an exception to all others)

[Ron McLeod]

Rick Liberato wrote:XP Pro 2002 Ser Pac 3   JDK 1.8.0_121

Hmm - that's quite old, and I know there are issues with XP supporting current SHA256-signed certificates.

I do have a laptop with XP somewhere at the office - I'll try it tomorrow and see if I run in to the same problem.

Edit: Just saw you last response so I won't need to dust off the old laptop.

[Ron McLeod]

Rick Liberato wrote:.... I assume there is a way I can tell AVG to NOT look at my app's E-mail sending? (an exception to all others)

I am using Avast on my Windows desktop and I have it configuired to not intercept and scan SSL traffic.  I've never had it enabled, so I don't know if that would cause this type of problem for me if it was on.

I've never used AVG, so no advise on what you can do with that.

[Rick Liberato]

WOW! .... this was a hard lesson! (Shut-off email scanners when coding Email apps!)  :  (  This problem beat me up all night.
Thank-you again for your expertise in this!

[Ron McLeod]

Rick Liberato wrote:WOW! .... this was a hard lesson! (Shut-off email scanners when coding Email apps!)  :  (  This problem beat me up all night.
Thank-you again for your expertise in this!

Have a cow as reward for not giving up.